gonzopancho
New Around Here
OpenVPN DCO is significantly faster than without.
It's also faster than Wireguard (even keeping the transform the same.)
It's also faster than Wireguard (even keeping the transform the same.)
That's probably because CPUs specialized operands can accelerate AES cipher operations, but not Chacha20.It's also faster than Wireguard (even keeping the transform the same.)
That's probably because CPUs specialized operands can accelerate AES cipher operations, but not Chacha20.
Oh, and CPU instructions can accelerate ChaCha20, too. That's why we did the IIMB work for pfSense, and extended it to ARM64 platforms.
In addition to AES-GCM, DCO can run ChaCha20/Poly1305
Jim,
Which instructions are you asserting to regarding ChaCha20-Poly1035 acceleration and on which architecture classes?
On x86 - even without AES-NI, intel did a lot of good work using SSE to speed up the AES family...
ChaCha20 does run quite nicely on MIPS32 along with 32-bit ARM (and ARM64 cores that didn't license the crypto extensions like Broadcom's older Pi chips...)
Go up in the thread - it's been discussed that DCO supports the AEAD ciphers for AES-128-GCM and ChaCha20-Poly1305 - that's old news...
Anyways nice to see that pfSense is implementing DCO - with the BSD stack, should perform well...
Realizing of course, that DCO is still work in progress, obviously...
At this point, it’s essentially done.
At this point, it’s essentially done.
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!